last executing test programs: 2.947511782s ago: executing program 3 (id=99): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x19, 0x8, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00", '\x00', '\x00', [0xfffffffffffffffd, 0x3]}) 2.946947171s ago: executing program 3 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x100000001, 0x0, 0x9, 0x0, 0x1}}]}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000300)={0x100000, 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000500)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket(0x10, 0x80002, 0x0) accept4$unix(r2, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x800) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e80fff3c00e", 0x24}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='xfs\x00', 0x100010, &(0x7f00000002c0)='workdir') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x100000001, 0x0, 0x9, 0x0, 0x1}}]}) (async) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000300)={0x100000, 0x10000}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000500)) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) socket(0x10, 0x80002, 0x0) (async) accept4$unix(r2, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x800) (async) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e80fff3c00e", 0x24}], 0x1}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='xfs\x00', 0x100010, &(0x7f00000002c0)='workdir') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, 0x0) (async) 2.826709107s ago: executing program 3 (id=101): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x2, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 2.802571238s ago: executing program 3 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) (async) ptrace$setregs(0x1a, r0, 0xba, &(0x7f0000000040)) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0xe7) (async) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0xe7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/129, 0x81}], 0x1, 0x7, 0x9) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1006000, &(0x7f0000000400)={[{@uuid_null}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, 'sysfs\x00'}}, {@obj_role={'obj_role', 0x3d, ',!@/'}}]}) gettid() (async) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000580)="736d0420f75bf94c17c986fcca3f419f593e91f91a9f939853dc6b7dfde45c4ed6b113de8ffafaef4b4cdb5eebdb7afb71e7e7d33a01308f71c78f3fc3bc43ee422c37b831ad576f8fdf40be8bd689fa6a9b3aaed36aa069a878660da158c74a523a94be55547d49dd4eea8abea2f197356ffedc453549eceb1d91d7b4279d625edb9e2ed17494a8d8632956e31b310c834cd7b44289f6b329f5fde07f9afd4a403733ddc5bc7285a4a4339a1fee336360e544cb19b6ba240aeaacbe219a8a6952ea0464992e725c399e5c70cc98be366291418c0383ed2efff39c97ae", &(0x7f0000000680)="09729170c5282b902c37fba1f0e0ed539b7bf65a2b4993d713f297c33625dd8f"}}, &(0x7f0000000140)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000580)="736d0420f75bf94c17c986fcca3f419f593e91f91a9f939853dc6b7dfde45c4ed6b113de8ffafaef4b4cdb5eebdb7afb71e7e7d33a01308f71c78f3fc3bc43ee422c37b831ad576f8fdf40be8bd689fa6a9b3aaed36aa069a878660da158c74a523a94be55547d49dd4eea8abea2f197356ffedc453549eceb1d91d7b4279d625edb9e2ed17494a8d8632956e31b310c834cd7b44289f6b329f5fde07f9afd4a403733ddc5bc7285a4a4339a1fee336360e544cb19b6ba240aeaacbe219a8a6952ea0464992e725c399e5c70cc98be366291418c0383ed2efff39c97ae", &(0x7f0000000680)="09729170c5282b902c37fba1f0e0ed539b7bf65a2b4993d713f297c33625dd8f"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x391201, 0x9) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setlease(r6, 0x400, 0x2) fcntl$getflags(r6, 0x40a) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000340)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000480)={0x0, 'macvlan0\x00', {0x3}}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000480)={0x0, 'macvlan0\x00', {0x3}}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) 2.727353372s ago: executing program 3 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200000000000000000000000000000000000100000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000a000000260000000000000014000e"], 0x104}}, 0x0) 2.727072082s ago: executing program 3 (id=106): syz_usb_connect(0x0, 0x39, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x100, 0x7f, 0x1}) 1.668876562s ago: executing program 1 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$FIBMAP(r4, 0x2284, &(0x7f0000000100)=0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="0fae0bf2dc6f710000de3e0f79f3f32e65daa0a40066660f3880760d66b9800000c00f326635000400000f30ba4200b000eeba2100b84200000f0b", 0x3b}], 0x1, 0x6b, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x7fff, 0x3, 0x4, 0x3ff, 0x2, 0xffffffa7, 0x1000, 0x9}}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) epoll_pwait2(r10, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000400)={r11, r12+60000000}, &(0x7f0000000440)={[0x5]}, 0x8) sendmmsg(r8, &(0x7f00000074c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2180", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003480)="bad174ec200a53a38c15adb30e19dea293", 0x11}, {&(0x7f00000034c0)="786c23570626016701e4227c7b28f8f85410304644d945cc05329e0e3e6a0020b72b3860fcede66f3f44537aef50403a7517e6afe41bfcbb42a7731dc69bcb3deff03f6ebf0770ab191c535d8fcd7af6d5ad276b366874bb172bc164a7cbc3a5913ae149c07039e28b494e3e5b399f66e24e76a5bf", 0x75}, {&(0x7f0000003540)="8896ddd57918d1f71800549e4592a1b240a975423d7b803832c885f509c408b268a0983a6bdcecee188f0526ee6b0c1f6536ff27e138a2c3160f5f3a3388707da357a69d5f40b300fac2cedcdcd7c4dff06403d803ddc40577de2ca19119a7f315e6f034ce7f4d39c82eb7203596c8fc8a38f33661a539fa8a3deb8da1e72cdcab61cfe60045d82ff85904276a1afb0e", 0x90}, {&(0x7f0000003600)="6647b2ad9e553f333a29dc386088318e916f9291f7faafd977119e07c8e4319bd644c418dfd7876df7e216f4dccc0901946fb100a81c55477fc57706ddb7b012d4aca42cdb4565ad0fdd811389ad83a8e407691e5616183557f4638a16e1f12a1a5fd33402ea3ecb18", 0x69}, {&(0x7f0000003680)="722ad9f781ed0816fa887441e01920364c89a20acd55e138e3ba4fcd844fa4a6d01edb64cfe646880c7c408ff614bcf7f72e4019e8938f0430f4f4b0200e62c595d5fa7ce8d5dbc5a903d14e075310915374cc2d6f7fc7590c7944f5fad51d1a1b23b9a4ef79dcbdd5421a93a72172a1f1e30876b102120e15503958b923615b7c6483ba282a8b382b614ab518f8cce510430f6c97fa7361ddf99ee7e5af644cc1c86252c75eb77fe6535b24d3b0288bebebe07bf0b9f1e8a1c68b5f21dcb40c380f56e3c79c395c592e8b64e0b59692de76241abb65e39e20b36ff8d494", 0xde}, {&(0x7f0000000300)="9552a6f6fc1aa44768bcb335dee9146dd0ff240c00617267465f7a303a2f8f487f10698560f3eb2e239ec70698790b4b6dd51fb77d54e7d22e438c126e2426fc15dc79f4fcbfd068201f27d3fabec0ec7138f39d603c5eb9a4abc65e89770f23f0a4c1b45634966bd63d7190484450df240a00000000000000760d1ed8a11ae952a1a78851bf720dcee33a8c76d05bc599fbe16bf914ef9dc7109c6b2a2509917c42e28eee0126a4565f472530", 0xad}, {&(0x7f0000000500)="6fe37ba2e6906d3e7245fc616fb69ef75b2241be711938021441e355432d9d40cb739c1a81ddfa74a128b912c398d2d75fe159ede99e02f3932a07d16c7494fc648c80099c0e9f49fc4395563f5dbbb75276effca029004e0b0394e8591fd436eeeed770bb6f2ad7a626e0386fca1c395a902e55242abcf31ff789c03479c2da5332df3346ee362968e127f40591302d2b8d5f14", 0x94}, {&(0x7f0000001a40)="d1350717a2009148b7fc36778093a6d61e162e104cf2c1f44f5c78246e12fb5fa4c84212d40bdc7e09250b58e19d49abf2514673778c1fec4c19d6bbecdfcb60412794d020330ffdbdd4721be52d77fa447a37b721b54c739c6294ec04e0fd0be7e32e1d550d63a80aa33d", 0x6b}, {&(0x7f0000003a80)="069c4e4220e5b1b4ef5d623f6f475c1c2d6d139337c28caff629ec456ae43fcc8c816876387a247e34ae1ec69104c92cac1215832ac0fed45596", 0x3a}], 0x9}}], 0x2, 0x800) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x10a, 0x0, 0x400006}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.430154222s ago: executing program 2 (id=118): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x19, 0x8, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffe00", '\x00', '\x00', [0xfffffffffffffffd, 0x3]}) 1.359818066s ago: executing program 2 (id=119): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x22, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a101851075089506150026ff008100851175089513150026ff008100c0"}}, 0x13a) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000007001000000201005a2cc918cb17ef17f8c900de0084d6024a12ae4edb29b3cda8a5f6ac69adab857f2b3fd722ef2f9a957d4707d6bccca8d56a67c8dc3abfa8"], 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) r3 = eventfd2(0x96, 0x80800) write$eventfd(r3, &(0x7f0000000140)=0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 1.358819616s ago: executing program 0 (id=121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010020000000f4ffffffffffffff0400000000000000020000000002000000e6ffe4200091ad07000000000000000000008000000000ffff0f800000000003000000000000000400000200000000130000000000000003000000b86b6e"], 0xd4}}, 0x0) 1.330479457s ago: executing program 0 (id=122): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write(r0, &(0x7f0000000040)='5', 0x1) 1.296478359s ago: executing program 0 (id=123): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x46900, 0x0) syz_io_uring_setup(0x2138, &(0x7f0000000200)={0x0, 0xfbd9, 0x800, 0x3, 0xc4}, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x800, 0x0, 0x33}, 0x18) (async) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x800, 0x0, 0x33}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000010000000000000000000000000000fe8000000000000000000000000000bb000004d533"], 0x23c}}, 0x4080) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000004200)=""/4096, 0xe000}], 0x1) 1.227684602s ago: executing program 0 (id=124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200000000000000000000000000000000000100000000000000000000000000000000000000000000000005000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000a000000260000000000000014000e"], 0x104}}, 0x0) 1.227310872s ago: executing program 0 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x3, 0x0) syslog(0xa, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000400)="ad19a03c8e5df843905ceb43d1570142cca9addea2e3888e", 0x18, 0x3b00, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0xfff, 0x0, 0x8, 0x100, 0x281}, 0x14) socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect$midi(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040670a115040000102030109022d00010105000d0904000002010300280905030304000501000525010004"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) syslog(0xa, 0x0, 0x0) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r1, &(0x7f0000000400)="ad19a03c8e5df843905ceb43d1570142cca9addea2e3888e", 0x18, 0x3b00, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0xfff, 0x0, 0x8, 0x100, 0x281}, 0x14) (async) socket(0x80000000000000a, 0x2, 0x0) (async) syz_usb_connect$midi(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040670a115040000102030109022d00010105000d0904000002010300280905030304000501000525010004"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) 1.226861552s ago: executing program 2 (id=126): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x15f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x20, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 1.211387433s ago: executing program 1 (id=127): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xa, 0x19, 0x8, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00", '\x00', '\x00', [0xfffffffffffffffd, 0x3]}) 1.192026393s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xfe, 0x20, 0x6, {0x8, 0xb, 0x2, 0x0, 0x1, 0x22, 0x30, 0xc3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa, 0xfffffff7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x4, 0x3, {0xa, 0x25, 0x25, 0x1, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x9, {0xa, 0x25, 0x25, 0xa, 0x0, 0x9}}}}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c00018008000100000000000c00018008000100"], 0x50}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x34c, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x471}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x224, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xf2, 0x3, "01b1f4a0b3ccc85ade3ed26fedf2ceed9751bc385bad232efc02cad78b25f1ce9742a07a74c21c4a544fd49ae58b009018006dc98d14e1c1b6e9071de389cca495bd3aee3174cd5d8465ee31ec56cf6287a95112c9782c1e283f8bad6617ab8dacd8508c7fbacda457ddd09b9e3931d2655f677b108412de962daf4ace35efce55aea6c680c3a42f4447da1b4b99bf112ac0c3b83c335e7e0872cc0ccdc8b56639619f52a6b67de0124512a94419649b693c3b029aa95388b397664bf452cfcfa153a05e8f9ec9443c24cb98c9bc50e504ccec59068f51f2bca9a96ed7f8830c392331436c0424ad43dda6e38aa0"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "54bfbce4e2f4e7f30d12046e1c55baa071bd72b0201cc9d27a433284c0c7373208"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c6ed6f5383d1bae59e2d14693e8c1471e6cdfeca6b0110bec0c25e093b"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "fbc2a1d9d84cdaf2fb0643b516107588f119f0eb426427bb11ad80bb8cbc05d5a5e0c78d"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4093f6c6689ed1d522f8eb1e33207e56ffa09533"}}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x54800}, 0x40814) 618.70682ms ago: executing program 2 (id=129): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r0, 0x8001, &(0x7f00000009c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028d060000007d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c0300000000000000724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 316.132365ms ago: executing program 2 (id=130): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000006020000", 0x58}], 0x1) 294.542666ms ago: executing program 2 (id=131): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x151d, 0x2, 0x3, 0x34c}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x866e, 0x400, 0x1, 0x359}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb07, 0x200, 0x1, 0x2ed}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3859, 0x1000, 0x1, 0x13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9340, 0x1, 0x1, 0x27a}}], 0x4, &(0x7f0000002040)={0x2e, 0x39, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xdc39}, 0x0, 0x0, '\x00', {0x0, 0xc9a, 0x0, &(0x7f0000001040)=@buf_1k="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"}}, &(0x7f00000020c0)) r1 = syz_io_uring_setup(0x282e, &(0x7f00000000c0)={0x0, 0x2457, 0x100, 0x41000000, 0x822000, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x20300, 0x0) poll(&(0x7f00000003c0)=[{r2, 0x2}], 0x1, 0x400) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000001000)={0x7, 0x80000001, 0x7fff, 0xffffffff, 0x1, "2fc80f1ba87b9953edce54292f21fb2e0d88d3", 0xffff0181, 0xfffffffa}) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) 215.94499ms ago: executing program 1 (id=132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010021000000f4ffffffffffffff0400000000000000020000000002000000e6ffe4200091ad07000000000000000000008000000000ffff0f800000000003000000000000000400000200000000130000000000000003000000b86b6e"], 0xd4}}, 0x0) 215.418819ms ago: executing program 1 (id=133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200000000000000000000000000000000000100000000000000000000000000000000000000000000000007000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003c000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000a000000260000000000000014000e"], 0x104}}, 0x0) 213.43019ms ago: executing program 1 (id=134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r0, 0x5, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000780), 0x80042, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2e, 0x1d, 0x1, 0x2, 0x9, 0xe3d5, 0x5, 0x2, 0x1}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6ce14f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f8100de08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57a4094fcc2a3709efdd7e5bf88f4cf3cb9aede83a5fb5278162883af0189dc3664d4d", 0xfffffffffffffec4, 0x4008245, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x46, &(0x7f0000000140)={0x0, 0x0}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1}, 0x107, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x2000000000, 0x500}) socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f0000000540)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 0 (id=135): setrlimit(0x40000000000008, &(0x7f0000000000)={0x8, 0x7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r1, 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x80000001, 0x6}) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) capget(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0x0, 0xb8f8, 0x2, 0xffff5d04, 0x1}) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r4, 0x3ee82249e55e30b4, &(0x7f00000001c0)={{}, {r8, r9+60000000}}, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 29.921997][ T36] audit: type=1400 audit(1789463636.130:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.925278][ T287] cgroup: Unknown subsys name 'net' [ 29.944762][ T36] audit: type=1400 audit(1789463636.130:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.972008][ T36] audit: type=1400 audit(1789463636.160:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.972583][ T287] cgroup: Unknown subsys name 'devices' [ 30.073806][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.079427][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.174466][ T36] audit: type=1400 audit(1789463636.380:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.197662][ T36] audit: type=1400 audit(1789463636.380:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.222455][ T36] audit: type=1400 audit(1789463636.380:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.248268][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.257161][ T36] audit: type=1400 audit(1789463636.460:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.282589][ T36] audit: type=1400 audit(1789463636.460:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.323390][ T36] audit: type=1400 audit(1789463636.530:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.324573][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.348903][ T36] audit: type=1400 audit(1789463636.530:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.521659][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.528852][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.551480][ T294] bridge_slave_0: entered allmulticast mode [ 31.558128][ T294] bridge_slave_0: entered promiscuous mode [ 31.577277][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.584465][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.591617][ T294] bridge_slave_1: entered allmulticast mode [ 31.597941][ T294] bridge_slave_1: entered promiscuous mode [ 31.715478][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.722696][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.729943][ T301] bridge_slave_0: entered allmulticast mode [ 31.736275][ T301] bridge_slave_0: entered promiscuous mode [ 31.744063][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.751184][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.758252][ T301] bridge_slave_1: entered allmulticast mode [ 31.764788][ T301] bridge_slave_1: entered promiscuous mode [ 31.793350][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.800415][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.807501][ T300] bridge_slave_0: entered allmulticast mode [ 31.813806][ T300] bridge_slave_0: entered promiscuous mode [ 31.824938][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.832043][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.839111][ T300] bridge_slave_1: entered allmulticast mode [ 31.845539][ T300] bridge_slave_1: entered promiscuous mode [ 31.914422][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.921506][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.928799][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.935875][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.954824][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.961933][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.969044][ T299] bridge_slave_0: entered allmulticast mode [ 31.975356][ T299] bridge_slave_0: entered promiscuous mode [ 31.982330][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.989390][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.996530][ T299] bridge_slave_1: entered allmulticast mode [ 32.002900][ T299] bridge_slave_1: entered promiscuous mode [ 32.059270][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.066386][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.073726][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.080769][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.114892][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.122296][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.129826][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.137266][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.148580][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.155674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.182683][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.189748][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.229479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.236593][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.244504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.251593][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.286553][ T294] veth0_vlan: entered promiscuous mode [ 32.300419][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.307523][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.328770][ T294] veth1_macvtap: entered promiscuous mode [ 32.337714][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.344777][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.352512][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.359567][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.367222][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.374274][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.405953][ T301] veth0_vlan: entered promiscuous mode [ 32.438400][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.450475][ T301] veth1_macvtap: entered promiscuous mode [ 32.464712][ T300] veth0_vlan: entered promiscuous mode [ 32.470356][ T299] veth0_vlan: entered promiscuous mode [ 32.487893][ T300] veth1_macvtap: entered promiscuous mode [ 32.509587][ T299] veth1_macvtap: entered promiscuous mode [ 32.702290][ T336] veth1_to_hsr: entered promiscuous mode [ 32.708075][ T336] veth1_to_hsr: entered allmulticast mode [ 32.779497][ T347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 32.872904][ T359] netlink: 'syz.0.14': attribute type 12 has an invalid length. [ 32.882004][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.023047][ T372] batadv_slave_1: entered promiscuous mode [ 33.029240][ T371] batadv_slave_1: left promiscuous mode [ 33.034997][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 33.058120][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.067549][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 33.080584][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 33.093208][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.101670][ T31] usb 4-1: Product: syz [ 33.105991][ T31] usb 4-1: Manufacturer: syz [ 33.110707][ T31] usb 4-1: SerialNumber: syz [ 33.213383][ T382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'. [ 33.259897][ T388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.269655][ T388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.280746][ T388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.289574][ T388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.297195][ T390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.306839][ T390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.320830][ T332] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 33.343910][ T31] usb 4-1: USB disconnect, device number 2 [ 33.413296][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.501145][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.544716][ T407] ======================================================= [ 33.544716][ T407] WARNING: The mand mount option has been deprecated and [ 33.544716][ T407] and is ignored by this kernel. Remove the mand [ 33.544716][ T407] option from the mount to silence this warning. [ 33.544716][ T407] ======================================================= [ 33.552755][ T408] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.584660][ T407] binder: Unknown parameter '00000000000000000003' [ 33.682337][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 33.693590][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57884, setting to 1024 [ 33.704791][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.718020][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.727132][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.736509][ T46] usb 2-1: config 0 descriptor?? [ 33.841388][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.866769][ T412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.31'. [ 33.883269][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.912362][ T414] netlink: 'syz.3.32': attribute type 27 has an invalid length. [ 33.931059][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.938323][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.947375][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 33.953505][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.962732][ T46] usb 2-1: USB disconnect, device number 2 [ 33.991162][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 33.997965][ T66] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.008354][ T66] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.020048][ T66] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 34.034098][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 36, changing to 7 [ 34.045274][ T66] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.056489][ T66] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 34.062768][ T311] usb 1-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 34.065775][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.076508][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.084986][ T66] usb 3-1: Product: syz [ 34.093545][ T311] usb 1-1: config 1 has no interface number 0 [ 34.097642][ T66] usb 3-1: Manufacturer: syz [ 34.107799][ T66] usb 3-1: SerialNumber: syz [ 34.115989][ T311] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.139429][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.148707][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.156916][ T311] usb 1-1: Product: syz [ 34.161224][ T311] usb 1-1: Manufacturer: syz [ 34.169973][ T311] usb 1-1: SerialNumber: syz [ 34.378406][ T311] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 34.387223][ T311] cdc_ncm 1-1:1.1: bind() failure [ 34.394017][ T311] usb 1-1: USB disconnect, device number 2 [ 34.482656][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 34.509006][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.521584][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.541717][ T433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 34.565539][ T435] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.632083][ T437] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.741140][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.878407][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.045732][ T447] Zero length message leads to an empty skb [ 35.053538][ T36] kauditd_printk_skb: 89 callbacks suppressed [ 35.053555][ T36] audit: type=1400 audit(1789463641.260:163): avc: denied { ioctl } for pid=445 comm="syz.0.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4380 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.147752][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.291137][ T311] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 35.345797][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.391131][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.442266][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 35.471130][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 35.484500][ T311] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 35.493602][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.502368][ T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.508880][ T311] usb 1-1: config 0 descriptor?? [ 35.519074][ T446] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 35.526321][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.537397][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 35.548395][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 35.551273][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.563688][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.577412][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.586961][ T31] usb 2-1: SerialNumber: syz [ 35.606225][ T437] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 35.631779][ T454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=454 comm=syz.2.46 [ 35.656061][ T36] audit: type=1400 audit(1789463641.860:164): avc: denied { getopt } for pid=453 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.739878][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 35.747088][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.754889][ T36] audit: type=1400 audit(1789463641.950:165): avc: denied { create } for pid=455 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.775255][ T311] usb 1-1: USB disconnect, device number 3 [ 35.782683][ T36] audit: type=1400 audit(1789463641.950:166): avc: denied { create } for pid=455 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.803319][ T36] audit: type=1400 audit(1789463641.970:167): avc: denied { ioctl } for pid=455 comm="syz.2.47" path="socket:[3820]" dev="sockfs" ino=3820 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.828790][ T36] audit: type=1400 audit(1789463641.970:168): avc: denied { write } for pid=455 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.848270][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.856382][ T36] audit: type=1400 audit(1789463641.970:169): avc: denied { write } for pid=455 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.861565][ T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.875863][ T36] audit: type=1400 audit(1789463641.970:170): avc: denied { ioctl } for pid=455 comm="syz.2.47" path="socket:[3819]" dev="sockfs" ino=3819 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.907933][ T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.908818][ T36] audit: type=1326 audit(1789463642.050:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=434 comm="syz.1.41" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd15e99e159 code=0x0 [ 35.961421][ T9] usb usb4-port1: attempt power cycle [ 36.023454][ T473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 36.087759][ T36] audit: type=1400 audit(1789463642.290:172): avc: denied { mount } for pid=478 comm="syz.2.54" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.190321][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.55'. [ 36.266130][ T491] netlink: 'syz.2.58': attribute type 5 has an invalid length. [ 36.301168][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.339907][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.353495][ T503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 36.482250][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.671139][ T370] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.721184][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.742270][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.821152][ T370] usb 1-1: Using ep0 maxpacket: 8 [ 36.828862][ T370] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 36.838018][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.846078][ T370] usb 1-1: Product: syz [ 36.850322][ T370] usb 1-1: Manufacturer: syz [ 36.855063][ T370] usb 1-1: SerialNumber: syz [ 36.860580][ T370] usb 1-1: config 0 descriptor?? [ 36.882210][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.991207][ T9] usb usb4-port1: unable to enumerate USB device [ 37.292729][ T521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.301334][ T521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.583983][ T31] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 37.598686][ T31] usb 2-1: USB disconnect, device number 3 [ 37.827512][ T531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'. [ 37.891155][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 37.914568][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.042443][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 38.053750][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 38.061277][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.065500][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 38.082189][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 38.093810][ T31] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 38.103157][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.116648][ T31] usb 2-1: Product: syz [ 38.120907][ T31] usb 2-1: Manufacturer: syz [ 38.125740][ T31] usb 2-1: SerialNumber: syz [ 38.135092][ T529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 38.143110][ T529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 38.151817][ T31] pl2303 2-1:1.0: pl2303 converter detected [ 38.158806][ T31] pl2303 2-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 38.277935][ T540] fuse: Bad value for 'rootmode' [ 38.301181][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.351510][ T528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.360160][ T528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.368492][ T514] usb 2-1: USB disconnect, device number 4 [ 38.541162][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.671165][ T9] usb 4-1: device descriptor read/64, error -71 [ 38.911139][ T9] usb 4-1: device descriptor read/64, error -71 [ 39.021296][ T9] usb usb4-port1: attempt power cycle [ 39.121122][ T514] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.261229][ T514] usb 2-1: device descriptor read/64, error -71 [ 39.272937][ T555] netlink: 'syz.2.82': attribute type 11 has an invalid length. [ 39.361161][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.389855][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.492855][ T311] usb 1-1: USB disconnect, device number 4 [ 39.506097][ T514] usb 2-1: device descriptor read/64, error -71 [ 39.527624][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.532032][ T573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.84'. [ 39.761121][ T514] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.772578][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 39.812145][ T9] usb 4-1: device descriptor read/8, error -71 [ 39.921123][ T514] usb 2-1: device descriptor read/64, error -71 [ 39.942193][ T9] usb 4-1: device descriptor read/8, error -71 [ 40.051276][ T9] usb usb4-port1: unable to enumerate USB device [ 40.161123][ T514] usb 2-1: device descriptor read/64, error -71 [ 40.183971][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 40.183989][ T36] audit: type=1400 audit(1789463646.390:201): avc: denied { create } for pid=586 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.209500][ T36] audit: type=1400 audit(1789463646.400:202): avc: denied { write } for pid=586 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.228744][ T36] audit: type=1400 audit(1789463646.400:203): avc: denied { connect } for pid=586 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.256869][ T36] audit: type=1400 audit(1789463646.400:204): avc: denied { read } for pid=586 comm="syz.0.90" path="socket:[5185]" dev="sockfs" ino=5185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.291196][ T514] usb usb2-port1: attempt power cycle [ 40.324338][ T597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 40.331333][ T36] audit: type=1400 audit(1789463646.500:205): avc: denied { append } for pid=593 comm="syz.0.91" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.370071][ T599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.372475][ T36] audit: type=1400 audit(1789463646.500:206): avc: denied { map } for pid=593 comm="syz.0.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.380194][ T599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.421148][ T36] audit: type=1400 audit(1789463646.500:207): avc: denied { execute } for pid=593 comm="syz.0.91" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.444425][ T36] audit: type=1400 audit(1789463646.510:208): avc: denied { map } for pid=590 comm="syz.2.92" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.468586][ T36] audit: type=1400 audit(1789463646.510:209): avc: denied { bind } for pid=593 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.488703][ T36] audit: type=1400 audit(1789463646.620:210): avc: denied { mount } for pid=598 comm="syz.2.94" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.553999][ T602] capability: warning: `syz.0.95' uses 32-bit capabilities (legacy support in use) [ 40.671218][ T514] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.692171][ T514] usb 2-1: device descriptor read/8, error -71 [ 40.781368][ T628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 40.820289][ T634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.104'. [ 40.829483][ T634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'. [ 40.839434][ T514] usb 2-1: device descriptor read/8, error -71 [ 40.846530][ T635] FAULT_INJECTION: forcing a failure. [ 40.846530][ T635] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.860130][ T635] CPU: 0 UID: 0 PID: 635 Comm: syz.0.104 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 40.860160][ T635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.860182][ T635] Call Trace: [ 40.860190][ T635] [ 40.860198][ T635] __dump_stack+0x21/0x30 [ 40.860233][ T635] dump_stack_lvl+0x140/0x1c0 [ 40.860263][ T635] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.860293][ T635] ? kasan_save_free_info+0x44/0x50 [ 40.860314][ T635] ? kmem_cache_free+0x1bd/0x4f0 [ 40.860336][ T635] ? __kfree_skb+0x18f/0x210 [ 40.860361][ T635] ? consume_skb+0x65/0x1a0 [ 40.860385][ T635] ? netlink_recvmsg+0x5e7/0xe60 [ 40.860413][ T635] ? sock_recvmsg+0x188/0x1e0 [ 40.860434][ T635] ? __sys_recvfrom+0x241/0x3b0 [ 40.860460][ T635] dump_stack+0x19/0x20 [ 40.860489][ T635] should_fail_ex+0x3c2/0x510 [ 40.860515][ T635] should_fail+0xf/0x20 [ 40.860545][ T635] should_fail_usercopy+0x1e/0x30 [ 40.860574][ T635] _copy_to_iter+0x1a6/0x1520 [ 40.860605][ T635] ? __kasan_check_write+0x18/0x20 [ 40.860627][ T635] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 40.860649][ T635] ? __virt_addr_valid+0x2a1/0x370 [ 40.860675][ T635] ? __cfi__copy_to_iter+0x10/0x10 [ 40.860704][ T635] ? __check_object_size+0x54c/0x870 [ 40.860729][ T635] ? __cfi___check_object_size+0x10/0x10 [ 40.860751][ T635] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 40.860772][ T635] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 40.860800][ T635] __skb_datagram_iter+0x103/0x940 [ 40.860828][ T635] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 40.860858][ T635] skb_copy_datagram_iter+0x44/0x160 [ 40.860898][ T635] netlink_recvmsg+0x2d4/0xe60 [ 40.860930][ T635] ? __cfi_netlink_recvmsg+0x10/0x10 [ 40.860963][ T635] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 40.860988][ T635] ? security_socket_recvmsg+0x44/0x130 [ 40.861020][ T635] ? __cfi_netlink_recvmsg+0x10/0x10 [ 40.861051][ T635] sock_recvmsg+0x188/0x1e0 [ 40.861079][ T635] __sys_recvfrom+0x241/0x3b0 [ 40.861108][ T635] ? __cfi___sys_recvfrom+0x10/0x10 [ 40.861142][ T635] __x64_sys_recvfrom+0xe9/0x100 [ 40.861171][ T635] x64_sys_call+0x18cf/0x2ee0 [ 40.861190][ T635] do_syscall_64+0x57/0xf0 [ 40.861215][ T635] ? clear_bhb_loop+0x50/0xa0 [ 40.861234][ T635] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.861252][ T635] RIP: 0033:0x7fa71675e98e [ 40.861273][ T635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.861286][ T635] RSP: 002b:00007fa7175d8ee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 40.861308][ T635] RAX: ffffffffffffffda RBX: 00007fa7175da6c0 RCX: 00007fa71675e98e [ 40.861320][ T635] RDX: 0000000000001000 RSI: 00007fa7175d9000 RDI: 000000000000000f [ 40.861330][ T635] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000000 [ 40.861339][ T635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000380 [ 40.861349][ T635] R13: 00007fa7175d8fb0 R14: 000000000000000c R15: 0000000000000000 [ 40.861361][ T635] [ 41.161241][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.281148][ T514] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.301109][ T31] usb 4-1: device descriptor read/64, error -71 [ 41.317632][ T514] usb 2-1: device descriptor read/8, error -71 [ 41.438497][ T659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 41.452146][ T514] usb 2-1: device descriptor read/8, error -71 [ 41.531040][ T669] overlay: ./file0 is not a directory [ 41.532362][ T668] incfs: Error accessing: ./file0. [ 41.551159][ T668] incfs: mount failed -20 [ 41.561397][ T514] usb usb2-port1: unable to enumerate USB device [ 41.571167][ T31] usb 4-1: device descriptor read/64, error -71 [ 41.821142][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 41.972140][ T31] usb 4-1: device descriptor read/64, error -71 [ 42.198343][ T514] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 42.222022][ T690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.121'. [ 42.231165][ T31] usb 4-1: device descriptor read/64, error -71 [ 42.250275][ T692] SELinux: syz.0.122 (692) set checkreqprot to 1. This is no longer supported. [ 42.341227][ T31] usb usb4-port1: attempt power cycle [ 42.571259][ T514] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.631151][ T556] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 42.681154][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 42.702124][ T31] usb 4-1: device descriptor read/8, error -71 [ 42.722346][ T514] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.732524][ T514] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.746852][ T514] usb 1-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 42.755961][ T514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.764120][ T514] usb 1-1: Product: syz [ 42.768362][ T514] usb 1-1: Manufacturer: syz [ 42.772991][ T514] usb 1-1: SerialNumber: syz [ 42.783377][ T706] FAULT_INJECTION: forcing a failure. [ 42.783377][ T706] name failslab, interval 1, probability 0, space 0, times 1 [ 42.796066][ T706] CPU: 1 UID: 0 PID: 706 Comm: syz.1.128 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 42.796100][ T706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.796114][ T706] Call Trace: [ 42.796121][ T706] [ 42.796129][ T706] __dump_stack+0x21/0x30 [ 42.796167][ T706] dump_stack_lvl+0x140/0x1c0 [ 42.796214][ T706] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.796247][ T706] ? __kmalloc_cache_noprof+0x23c/0x470 [ 42.796272][ T706] ? lockref_get+0x131/0x1c0 [ 42.796305][ T706] ? proc_init_fs_context+0x65/0x3f0 [ 42.796324][ T706] dump_stack+0x19/0x20 [ 42.796345][ T706] should_fail_ex+0x3c2/0x510 [ 42.796388][ T706] should_failslab+0xac/0x100 [ 42.796414][ T706] __kmalloc_cache_noprof+0x41/0x470 [ 42.796442][ T706] ? __se_sys_fspick+0x211/0x460 [ 42.796457][ T706] __se_sys_fspick+0x211/0x460 [ 42.796471][ T706] ? __x64_sys_futex+0x110/0x110 [ 42.796492][ T706] ? __x64_sys_fspick+0xa0/0xa0 [ 42.796540][ T706] ? __kasan_check_write+0x18/0x20 [ 42.796561][ T706] ? fpregs_restore_userregs+0x11c/0x260 [ 42.796593][ T706] __x64_sys_fspick+0x7f/0xa0 [ 42.796617][ T706] x64_sys_call+0x23c4/0x2ee0 [ 42.796631][ T706] do_syscall_64+0x57/0xf0 [ 42.796659][ T706] ? clear_bhb_loop+0x50/0xa0 [ 42.796688][ T706] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.796719][ T706] RIP: 0033:0x7fd15e99e159 [ 42.796742][ T706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.796756][ T706] RSP: 002b:00007fd15f8c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 42.796773][ T706] RAX: ffffffffffffffda RBX: 00007fd15ec25fa0 RCX: 00007fd15e99e159 [ 42.796784][ T706] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 42.796810][ T706] RBP: 00007fd15ea3503b R08: 0000000000000000 R09: 0000000000000000 [ 42.796826][ T706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.796839][ T706] R13: 00007fd15ec26038 R14: 00007fd15ec25fa0 R15: 00007ffc64b2e1c8 [ 42.796857][ T706] [ 42.799044][ T556] usb 2-1: unable to get BOS descriptor or descriptor too short [ 42.832620][ T31] usb 4-1: device descriptor read/8, error -71 [ 42.837698][ T556] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 42.990899][ T700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.995957][ T556] usb 2-1: can't read configurations, error -71 [ 43.042918][ T700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.091114][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 43.092051][ T514] usb 1-1: MIDIStreaming interface descriptor not found [ 43.109112][ T514] usb 1-1: USB disconnect, device number 5 [ 43.132178][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.158288][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 43.264275][ T31] usb 4-1: device descriptor read/8, error -71 [ 43.321814][ T733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 43.371306][ T31] usb usb4-port1: unable to enumerate USB device [ 43.583505][ T742] FAULT_INJECTION: forcing a failure. [ 43.583505][ T742] name failslab, interval 1, probability 0, space 0, times 0 [ 43.596335][ T742] CPU: 0 UID: 0 PID: 742 Comm: syz.0.135 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 43.596368][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.596388][ T742] Call Trace: [ 43.596393][ T742] [ 43.596399][ T742] __dump_stack+0x21/0x30 [ 43.596427][ T742] dump_stack_lvl+0x140/0x1c0 [ 43.596450][ T742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.596473][ T742] ? __kasan_check_write+0x18/0x20 [ 43.596489][ T742] ? down_write+0xee/0x2b0 [ 43.596510][ T742] dump_stack+0x19/0x20 [ 43.596531][ T742] should_fail_ex+0x3c2/0x510 [ 43.596552][ T742] should_failslab+0xac/0x100 [ 43.596571][ T742] __kmalloc_cache_noprof+0x41/0x470 [ 43.596588][ T742] ? cgroup_mkdir+0xbe2/0x1600 [ 43.596609][ T742] cgroup_mkdir+0xbe2/0x1600 [ 43.596632][ T742] ? __cfi_cgroup_mkdir+0x10/0x10 [ 43.596655][ T742] kernfs_iop_mkdir+0x1bb/0x2d0 [ 43.596677][ T742] vfs_mkdir+0x58e/0x810 [ 43.596700][ T742] do_mkdirat+0x240/0x530 [ 43.596722][ T742] ? __cfi_do_mkdirat+0x10/0x10 [ 43.596744][ T742] ? __kasan_check_write+0x18/0x20 [ 43.596760][ T742] ? getname_flags+0x203/0x6b0 [ 43.596777][ T742] ? __kasan_check_write+0x18/0x20 [ 43.596793][ T742] __x64_sys_mkdirat+0x8b/0xa0 [ 43.596815][ T742] x64_sys_call+0x2ba8/0x2ee0 [ 43.596829][ T742] do_syscall_64+0x57/0xf0 [ 43.596842][ T742] ? clear_bhb_loop+0x50/0xa0 [ 43.596861][ T742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.596879][ T742] RIP: 0033:0x7fa71679e159 [ 43.596892][ T742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.596905][ T742] RSP: 002b:00007fa7175fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 43.596922][ T742] RAX: ffffffffffffffda RBX: 00007fa716a25fa0 RCX: 00007fa71679e159 [ 43.596934][ T742] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 43.596944][ T742] RBP: 00007fa71683503b R08: 0000000000000000 R09: 0000000000000000 [ 43.596954][ T742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.596963][ T742] R13: 00007fa716a26038 R14: 00007fa716a25fa0 R15: 00007ffd25f0ed58 [ 43.596976][ T742] [ 43.597060][ T742] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] PREEMPT SMP KASAN PTI [ 43.828201][ T742] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 43.836639][ T742] CPU: 0 UID: 0 PID: 742 Comm: syz.0.135 Not tainted syzkaller #0 f62b9527b829eee6a2ac5cf651ba087b59645d0c [ 43.848031][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.858115][ T742] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 43.863608][ T742] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 c7 30 61 00 48 8b bb 08 01 00 00 [ 43.883234][ T742] RSP: 0018:ffffc9000e85fc88 EFLAGS: 00010206 [ 43.889317][ T742] RAX: 0f69bde9cb78ea00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 43.897306][ T742] RDX: ffff88811f8f1d00 RSI: ffff88810767a000 RDI: ffff888100042000 [ 43.905321][ T742] RBP: ffffc9000e85fd38 R08: ffffffff81dc0e98 R09: ffffffff81e02b7f [ 43.913307][ T742] R10: ffffffff81e05664 R11: ffffffff81e0269e R12: 0000000000000021 [ 43.921292][ T742] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88810767a010 [ 43.929276][ T742] FS: 00007fa7175fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 43.938215][ T742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.944812][ T742] CR2: 00007fa7175faff8 CR3: 0000000120064000 CR4: 00000000003526b0 [ 43.952808][ T742] Call Trace: [ 43.956105][ T742] [ 43.959052][ T742] ? __cfi_cgroup_mkdir+0x10/0x10 [ 43.964110][ T742] kernfs_iop_mkdir+0x1bb/0x2d0 [ 43.968982][ T742] vfs_mkdir+0x58e/0x810 [ 43.973253][ T742] do_mkdirat+0x240/0x530 [ 43.977608][ T742] ? __cfi_do_mkdirat+0x10/0x10 [ 43.982482][ T742] ? __kasan_check_write+0x18/0x20 [ 43.987607][ T742] ? getname_flags+0x203/0x6b0 [ 43.992388][ T742] ? __kasan_check_write+0x18/0x20 [ 43.997514][ T742] __x64_sys_mkdirat+0x8b/0xa0 [ 44.002301][ T742] x64_sys_call+0x2ba8/0x2ee0 [ 44.006992][ T742] do_syscall_64+0x57/0xf0 [ 44.011422][ T742] ? clear_bhb_loop+0x50/0xa0 [ 44.016121][ T742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.022032][ T742] RIP: 0033:0x7fa71679e159 [ 44.026465][ T742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.046694][ T742] RSP: 002b:00007fa7175fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 44.055137][ T742] RAX: ffffffffffffffda RBX: 00007fa716a25fa0 RCX: 00007fa71679e159 [ 44.063128][ T742] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 44.071118][ T742] RBP: 00007fa71683503b R08: 0000000000000000 R09: 0000000000000000 [ 44.079113][ T742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.087102][ T742] R13: 00007fa716a26038 R14: 00007fa716a25fa0 R15: 00007ffd25f0ed58 [ 44.095096][ T742] [ 44.098129][ T742] Modules linked in: [ 44.102432][ T742] ---[ end trace 0000000000000000 ]--- [ 44.111154][ T742] RIP: 0010:cgroup_mkdir+0x122a/0x1600 [ 44.116720][ T742] Code: eb 05 e8 79 4d 08 00 48 89 df e8 11 9e 00 00 48 81 fb 01 f0 ff ff 0f 83 9a fb ff ff 4c 8d b3 08 01 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 c7 30 61 00 48 8b bb 08 01 00 00 [ 44.148604][ T742] RSP: 0018:ffffc9000e85fc88 EFLAGS: 00010206 [ 44.155280][ T742] RAX: 0f69bde9cb78ea00 RBX: 0000000000000000 RCX: ffff8881f6e3acc0 [ 44.164387][ T742] RDX: ffff88811f8f1d00 RSI: ffff88810767a000 RDI: ffff888100042000 [ 44.173157][ T742] RBP: ffffc9000e85fd38 R08: ffffffff81dc0e98 R09: ffffffff81e02b7f [ 44.181271][ T742] R10: ffffffff81e05664 R11: ffffffff81e0269e R12: 0000000000000021 [ 44.189332][ T742] R13: dffffc0000000000 R14: 0000000000000108 R15: ffff88810767a010 [ 44.201168][ T742] FS: 00007fa7175fb6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 44.212876][ T742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.219655][ T742] CR2: 00007fece58220c0 CR3: 0000000120064000 CR4: 00000000003526b0 [ 44.227754][ T742] Kernel panic - not syncing: Fatal exception [ 44.234432][ T742] Kernel Offset: disabled [ 44.238765][ T742] Rebooting in 86400 seconds..